$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fd650caa-894a-38eb-b896-bf80063270d5.roa File: fd650caa-894a-38eb-b896-bf80063270d5.roa (raw, json) Hash identifier: U4iJ4khGLVCh2WA9MPd690GzCaPVOyvcALC5SwyjiDA= Subject key identifier: 68:09:2C:F2:3E:AD:15:EE:F6:6A:85:82:2C:3E:05:89:EC:26:02:D2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40AA56F236A77FF02DA16140 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fd650caa-894a-38eb-b896-bf80063270d5.roa Signing time: Fri 20 Jun 2025 09:35:43 +0000 ROA not before: Fri 20 Jun 2025 09:35:43 +0000 ROA not after: Thu 18 Sep 2025 09:35:43 +0000 asID: 22773 IP address blocks: 174.72.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:aa:56:f2:36:a7:7f:f0:2d:a1:61:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:35:43 2025 GMT Not After : Sep 18 09:35:43 2025 GMT Subject: CN=964e9631-52da-4df6-9caa-87a83f9fd321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:82:6f:34:b4:fc:85:41:44:45:bc:e5:44:bd: 53:0d:4c:a4:fc:3b:42:62:68:86:44:ad:cf:23:8f: 57:8d:1f:9b:aa:9b:3b:e3:65:5d:bb:d0:78:d1:54: d7:04:c9:96:90:d6:d3:c7:41:8c:5f:80:91:5c:7c: 64:37:88:c5:08:cc:14:3d:47:3c:36:27:55:af:f2: d3:56:2b:91:e1:53:d1:cd:f2:c5:e1:8e:31:e5:28: cf:8d:7e:a3:7c:59:84:72:61:13:6f:73:b9:18:d4: 6e:82:9e:dd:e7:73:6b:f0:5f:5a:56:fc:71:84:9d: c6:ba:ee:84:e2:65:42:ba:9f:5e:cd:fe:f5:f4:4a: 24:0c:5b:41:ec:70:6b:42:97:24:19:73:ce:90:39: a9:03:9b:28:a4:98:ce:37:32:df:49:53:27:b5:42: ec:f5:ac:89:d1:ff:7e:45:64:33:fb:63:a6:17:a2: 39:47:08:28:31:5e:53:27:39:3e:c3:2c:4c:90:8b: c5:d5:0c:25:b2:8e:4c:77:51:71:a6:c1:c7:72:0e: 63:16:1d:ed:7f:ba:ce:fe:75:61:4b:d0:17:f8:d3: 87:13:35:5a:96:b9:f7:76:79:6c:a9:9e:7c:09:0d: fd:db:e0:0e:18:93:9d:35:80:01:99:8d:59:60:db: 5b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:09:2C:F2:3E:AD:15:EE:F6:6A:85:82:2C:3E:05:89:EC:26:02:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fd650caa-894a-38eb-b896-bf80063270d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.72.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:13:27:d0:e9:38:9f:7f:b2:d1:62:0a:56:49:57:2c:57:07: e3:a0:4b:af:50:7c:eb:f3:a5:17:78:ae:f6:95:8d:00:e4:10: 82:8b:4b:b1:e8:61:2d:e9:8f:89:e1:a3:d2:94:43:9d:ec:3d: 3d:c8:87:5b:cb:cf:87:7a:dc:98:91:38:0b:52:23:f8:ad:13: b1:fb:90:24:d2:65:30:a7:f5:16:62:e3:04:f2:ef:31:31:70: eb:42:62:63:21:21:f8:4e:f7:4e:00:43:7f:d6:4b:40:17:55: eb:ad:cc:71:45:d7:c8:09:cd:ee:ca:79:de:92:43:ef:4c:64: 25:ac:61:c2:85:e5:b8:57:b4:cb:a0:ce:81:45:5e:21:5c:8a: 89:1c:34:5a:ba:38:bf:28:a1:c8:0b:4d:2f:d2:d5:b9:9d:70: 87:c9:46:21:3c:cb:c7:3e:df:f1:a6:63:f9:dc:51:f6:4b:86: 11:81:2b:21:10:47:8d:c0:b5:c9:1b:e0:b9:5d:e5:7d:b6:25: 33:3a:37:17:bf:ed:0d:e3:68:f4:4a:cc:f0:f7:0c:44:f3:0b: 3f:98:26:22:ae:d4:2d:57:35:45:96:34:f9:77:da:60:d9:75: 8f:cf:d9:43:53:ff:d9:50:13:23:59:c0:d7:03:00:aa:61:9d: ef:09:30:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqlbyNqd/8C2hYUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzU0M1oXDTI1MDkxODA5MzU0M1owLzEtMCsGA1UEAxMk OTY0ZTk2MzEtNTJkYS00ZGY2LTljYWEtODdhODNmOWZkMzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooJvNLT8hUFERbzlRL1TDUyk/DtCYmiGRK3P I49XjR+bqps742Vdu9B40VTXBMmWkNbTx0GMX4CRXHxkN4jFCMwUPUc8NidVr/LT ViuR4VPRzfLF4Y4x5SjPjX6jfFmEcmETb3O5GNRugp7d53Nr8F9aVvxxhJ3Guu6E 4mVCup9ezf719EokDFtB7HBrQpckGXPOkDmpA5sopJjONzLfSVMntULs9ayJ0f9+ RWQz+2OmF6I5RwgoMV5TJzk+wyxMkIvF1Qwlso5Md1FxpsHHcg5jFh3tf7rO/nVh S9AX+NOHEzValrn3dnlsqZ58CQ392+AOGJOdNYABmY1ZYNtbBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgJLPI+rRXu9mqFgiw+BYnsJgLSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmQ2NTBjYWEtODk0YS0z OGViLWI4OTYtYmY4MDA2MzI3MGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkjwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUTJ9DpOJ9/stFiClZJVyxXB+OgS69QfOvzpRd4rvaVjQDkEIKLS7Ho YS3pj4nho9KUQ53sPT3Ih1vLz4d63JiROAtSI/itE7H7kCTSZTCn9RZi4wTy7zEx cOtCYmMhIfhO904AQ3/WS0AXVeutzHFF18gJze7Ked6SQ+9MZCWsYcKF5bhXtMug zoFFXiFciokcNFq6OL8oocgLTS/S1bmdcIfJRiE8y8c+3/GmY/ncUfZLhhGBKyEQ R43Atckb4Lld5X22JTM6Nxe/7Q3jaPRKzPD3DETzCz+YJiKu1C1XNUWWNPl32mDZ dY/P2UNT/9lQEyNZwNcDAKphne8JME8= -----END CERTIFICATE-----Generated at Wed Jul 2 15:12:21 2025 by rpki-client